net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

Summary When authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational denial-of-service attack on the client process by sending a big iteration count value. Details A hostile IMAP server can send an arbitrarily large PBKDF2 iteration count in the...

GHSA-87PF-FPWV-P7M7 net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

Summary When authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational denial-of-service attack on the client process by sending a big iteration count value. Details A hostile IMAP server can send an arbitrarily large PBKDF2 iteration count in the...

CVE-2024-44956 drm/xe/preempt_fence: enlarge the fence critical section

In the Linux kernel, the following vulnerability has been resolved: drm/xe/preemptfence: enlarge the fence critical section It is really easy to introduce subtle deadlocks in preemptfenceworkfunc since we operate on single global ordered-wq for signalling our preempt fences behind the scenes, so...

CVE-2024-44956

In the Linux kernel, the following vulnerability has been resolved: drm/xe/preemptfence: enlarge the fence critical section It is really easy to introduce subtle deadlocks in preemptfenceworkfunc since we operate on single global ordered-wq for signalling our preempt fences behind the scenes, so...

GHSA-75QH-GG76-P2W4 CWA-2023-004: Excessive number of function parameters in compiled Wasm

A specifically crafted Wasm file can cause the VM to consume excessive amounts of memory when compiling a contract. This can lead to high memory usage, slowdowns, potentially a crash and can poison a lock in the VM, preventing any further interaction with contracts. For more information, see...

DEBIAN-CVE-2024-26691

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu-mutex is taken inside kvm-lock. The rule is violated by the pkvmcreatehypvm which acquires the kvm-lock while already holding the vcpu-mutex...